Privacy Policy
Information on the processing of personal data
Pursuant to Article 13 of EU Regulation 2016/679 (GDPR)
Last updated: May 2026
1. Data Controller
Associazione PNEI - O.D.V.
Email: associazione.pnei.m@gmail.com
The data controller is the association itself, represented by its president pro tempore.
2. Categories of data processed
Depending on the user's interaction with this site, the following categories of personal data may be processed:
- Identification and contact data: full name, email address, phone number and profession, voluntarily provided through the membership request form or through direct email communication with the association.
- Language preference: the site stores the selected language (Italian or English) in the browser via localStorage, solely for the purpose of redirecting the user to the appropriate version on subsequent visits. No tracking cookies or persistent identifiers are set.
The site does not collect browsing data through profiling cookies, analytics, third-party scripts, or tracking pixels.
3. Purposes and legal basis of processing
Personal data are processed for the following purposes and on the following legal bases:
- Handling of membership requests and communications: data entered by the user in the form on the site are used exclusively to allow the user to compose a pre-filled email message addressed to the association. The site does not automatically send or store the form data: actual transmission occurs only if and when the user sends the email from their email client. Legal basis: performance of pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR).
- Responding to communications received via email: data contained in received emails are processed in order to respond to the data subject's requests. Legal basis: legitimate interest of the controller in following up on received communications (Art. 6(1)(f) GDPR) and, where applicable, performance of pre-contractual measures.
- Technical operation of the site: storing the language preference in localStorage is necessary for the proper functioning of the language redirect mechanism. Legal basis: legitimate interest of the controller in providing a consistent browsing experience (Art. 6(1)(f) GDPR).
4. How the form works
The form on this site does not automatically transmit the data entered to a server or third-party service. When the user fills in the form and clicks Submit, the browser composes a pre-filled email message addressed to associazione.pnei.m@gmail.com and opens it in the user's default email client. Data are transmitted only if the user chooses to actually send the email from their client.
5. Nature of data provision
Provision of data through the form or by email is voluntary. Without the minimum necessary data (name and email) the association will not be able to follow up on the request. The language preference is managed automatically and requires no action from the user.
6. Data retention
Data contained in received email communications are retained for the time necessary to follow up on the data subject's request and, subsequently, for the period required by applicable law regarding the retention of association correspondence. The language preference in localStorage persists until the user manually clears their browser data.
7. Recipients and categories of recipients
Personal data are not disclosed to the public. They may be processed by members of the association's board who are authorised to process data. Email communications sent to associazione.pnei.m@gmail.com are managed through Google's email service (Gmail); Google LLC acts as a data processor for data passing through its servers. For information on the measures adopted by Google, please refer to the privacy notice available at policies.google.com/privacy.
8. Transfer of data outside the European Union
Since the email service used (Gmail) is provided by Google LLC, a company based in the United States, data contained in emails may be transferred to servers located outside the European Economic Area. Google LLC adheres to the EU-US Data Privacy Framework, recognised as adequate by the European Commission. Such transfers occur exclusively to enable the management of association communications.
9. Cookies and localStorage
This site does not use profiling cookies, analytics cookies, or third-party tracking services. The only information stored locally in the browser is the language preference via localStorage, necessary for the functioning of the language redirect mechanism. No unique identifiers are collected, and no user profiles are created.
10. Links to external sites
The site contains links to external sites (Facebook, PubMed, ResearchGate, IMBIO). The association is not responsible for the data processing carried out by those platforms. Users are encouraged to consult the respective privacy policies.
11. Data subject rights
Under Articles 15–22 of the GDPR, the data subject has the right to:
- Access: obtain confirmation as to whether personal data are being processed and access such data.
- Rectification: obtain the correction of inaccurate data.
- Erasure (right to be forgotten): obtain the deletion of personal data.
- Restriction of processing: obtain restriction of processing in the cases provided for by law.
- Data portability: receive the data in a structured format and transmit them to another controller.
- Objection: object to processing on legitimate grounds.
- Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
12. Complaint to the supervisory authority
The data subject has the right to lodge a complaint with the competent supervisory authority. For Italy, the supervisory authority is the Garante per la protezione dei dati personali (www.garanteprivacy.it). Data subjects in other EU Member States may also lodge a complaint with their local supervisory authority.
13. Automated decision-making and profiling
The controller does not carry out automated decision-making, including profiling, as referred to in Article 22 of the GDPR.
14. Contact
To exercise your rights or for any questions regarding the processing of personal data, you may contact the controller at: associazione.pnei.m@gmail.com